Jump to content

Draft:Eric Senter

From Wikipedia, the free encyclopedia
Eric Senter
OccupationsSecurity Researcher, Hydrogeologist
EmployerCalifornia Department of Water Resources (former)
Known forCVE-2025-10637
Managed aquifer recharge (MAR)
Websitegithub.com/ericsenter

Eric Senter is an American researcher specializing in critical infrastructure analysis, spanning both physical hydrogeological systems and digital threat landscapes. He is a former Senior Engineering Geologist for the California Department of Water Resources (DWR) and a credited security researcher in the Common Vulnerabilities and Exposures (CVE) system.

Engineering geology

[edit]

Senter served as a Senior Engineering Geologist for the California Department of Water Resources (DWR), where he worked on the implementation of the Sustainable Groundwater Management Act (SGMA).[1] He focused on Managed aquifer recharge (MAR) strategies to mitigate drought conditions in the Central Valley.[2]

His work contributed to Bulletin 118 (California's Groundwater), the state's primary inventory of groundwater basins.[3] Senter also provided technical guidance for interdisciplinary studies led by University of California, Davis researchers, including assessments of groundwater nitrate occurrence and regional food systems.[4][5]

Information security

[edit]

In the field of information security, Senter is credited with the discovery of CVE-2025-10637, a high-severity information exposure vulnerability in the Social Feed Gallery plugin for WordPress. Analysis by security vendors confirmed that the flaw allowed unauthenticated access to private user data via REST API endpoints.[6]

Under the pseudonym p5yb34m, Senter tracks malware distribution networks.[7] He is a contributor to Cryptolaemus, a research collective dedicated to tracking the Emotet botnet.[8] His intelligence regarding Emotet's "Epoch 1" infrastructure has been cited in the group's daily defense indicators.[9] His findings on campaigns involving Trickbot and Ryuk—malware frequently dropped by Emotet—have also been referenced by independent security analysts.[10]

Selected reports

[edit]
  • California's Groundwater Update 2013 (PDF) (Report). California Department of Water Resources. 2014. (Contributor)
  • Groundwater Nitrate Occurrence: Technical Report 4 (PDF) (Report). Center for Watershed Sciences, University of California, Davis. 2012. (Agency Contributor)
  • Assessing the San Luis Obispo County Food System (PDF) (Report). UC Davis Sustainable Agriculture Research & Education Program. 2013. (Technical Expert)

References

[edit]
  1. ^ "Sustainable Groundwater Management Program: News for March 15". Maven's Notebook. 2018-03-16. Retrieved 2024-01-06.
  2. ^ Campbell, Todd (2018-03-16). "Underground water banks tackle drought". Farm Progress. These are not groundwater banks in the sense of a put and take operation, but they are projects that actively recharge...
  3. ^ California's Groundwater Update 2013 - Appendix F (PDF) (Report). California Department of Water Resources. 2014-04-30. p. 30. Retrieved 2024-01-06.
  4. ^ Groundwater Nitrate Occurrence (PDF) (Report). Center for Watershed Sciences, University of California, Davis. 2012. p. 7. Agencies: California Department of Water Resources... Eric Senter
  5. ^ Assessing the San Luis Obispo County Food System (PDF) (Report). UC Davis Sustainable Agriculture Research & Education Program. 2013. p. 6. Eric Senter, California Department of Water Resources... technical experts who could shed more light on content
  6. ^ "Social Feed Gallery <= 4.9.2 - Unauthenticated Information Exposure". Wordfence. 2025-10-25. Researcher: eRic sEnteR
  7. ^ "Research Attribution" (Self-published source). GitHub. Retrieved 2024-05-21.
  8. ^ "Emotet Resurfaces: A Technology Company's Response". Team Cymru. 2021-11-15. Cryptolaemus, a collective of information security professionals...
  9. ^ "Daily Emotet IoCs and Notes for 12/30/19". Cryptolaemus. 2019-12-30. Credits: Doc DL URLs - @p5yb34m
  10. ^ "SharePoint Island Hopping: Phishing with compromised accounts". BushidoToken. 2021-06-13. References: ... twitter.com/p5yb34m/status/1167130345965117440